HP ew2500 802.11b/g Print Server Security features, 1Summary of HP Jetdirect security features

Page 131

6 Security features (V.40.xx)

The HP Jetdirect print server security features minimize unauthorized access to network parameters and other stored data. The features differ depending on the print server product and the firmware version, and are limited on value-featured print servers.

CAUTION: Although the basic HP Jetdirect security features can protect sensitive data, no method can fully prevent unauthorized access.

For advanced security needs, contact HP Consulting services.

A summary of the basic security features provided by HP Jetdirect print servers are listed in the following table.

Table 6-1Summary of HP Jetdirect security features

Secure Embedded Web Server Management

Securely access the HP Embedded Web Server. A pre-installed, self-signed HP Jetdirect certificate provides HTTPS access to the HP Embedded Web Server from your Web browser.

Install a digital certificate issued by a trusted third party to configure the print server as a trusted site.

Configure security settings using the security configuration wizard.

Configure full-featured print servers with EAP/802.1X port-based authentication.

IPsec/Firewall

Control IP traffic using Firewall or IPsec policies. Use Firewall rules to allow or drop IP traffic based on IP addresses and services. Internet protocol security (IPsec) rules add the security benefits of authentication and encryption.

Network Protocol Control

Enable or disable network printing, printing services, device discovery, and management protocols on the HP Jetdirect print server. Prevent unauthorized access by disabling unused or unnecessary protocols.

Enable or disable protocols using Telnet (IPv4), the HP Embedded Web Server, or HP Web Jetadmin (IPv4).

IP Administrator Password

Restrict access to HP Jetdirect configuration parameters by setting the administrator password. The password is required by Telnet (IPv4), HP Web Jetadmin (IPv4), and the HP Embedded Web Server.

Use up to 16 alphanumeric characters.

Set the password using TFTP (IPv4), Telnet (IPv4), the HP Embedded Web Server services, or HP Web Jetadmin (IPv4).

Synchronize as the SNMP Set Community Name used in HP Web Jetadmin (IPv4) SNMP v1/v2c Set commands, if configured through the HP Embedded Web Server.

Cleared by cold reset of the print server to factory default settings.

IPv4 Access Control List

121

Image 131
Contents HP Jetdirect Print Servers Page HP Jetdirect Print Servers Trademark Credits Copyright Hewlett-Packard Development Company, L.PTable of contents HP Embedded Web Server DLC/LLC Snmp IPsec/Firewall configuration 105Troubleshoot the HP Jetdirect print server 125 Security features 121HP Jetdirect configuration pages 135 Appendix B FTP printing 173 Appendix a LPD printing 163Index 191 Appendix C HP Jetdirect control panel menus 177Appendix D Open source licensing statements 188 Supported print servers Introducing the HP Jetdirect print server2Supported network protocols Supported network protocolsSnmp IP and IPX AuthenticationEAP/802.1X port-based authentication Security protocolsIPsec/Firewall Wireless print server authenticationHP support Firmware upgradesFirmware installation tools Supplied manualsHP support by phone Product accessibilityProduct registration Operating Environment Function Remarks HP software solutions summary1Software Solutions HP Web Jetadmin see HP Web Jetadmin onOperating Environment Function System requirements Install HP Web Jetadmin software HP Jetdirect Printer Installer for UnixHP Web Jetadmin Internet Printer Connection software Configure and modify a deviceRemove HP Web Jetadmin software Verify HP Web Jetadmin installation and provide accessWindows XP/Server 2003 or 2008 integrated software Mac OS network installationNovell-supplied software Software toolsOpen System Preferences, and then open Print & Fax Use Bonjour Mac OS XTest the configuration Verify network configurationIPv6 address introduction TCP/IP configurationIPv6 configuration Stateless addresses IPv6 address configurationLink-local address Use DNS Stateful addressesTools and utilities IPv4 configurationServer-based and manual TCP/IP configuration IPv4 Default IP address is assigned Default IP address IPv4Default IP address is not assigned Dhcp requests enable/disable Default IP on wireless and wired print serversDefault IPv4 address configuration options Default IPv4 parameterTCP/IP configuration tools Default IPv4 behaviorConfigure the print server using BOOTP/TFTP on Unix Use BOOTP/TFTP IPv4Advantages of using BOOTP/TFTP Bootptab file entries IPv4 Systems using network information service NISConfigure the Bootp server RFC Description Option 1Tags supported in a BOOTP/DHCP boot fileTftp configuration file entries IPv4 General 2TFTP configuration file parametersExample HP Jetdirect Tftp configuration file TCP/IP Main TCP/IP Print Options Lpd-printing or lpd-config,lpd Printing or 9100-configFtp-printing or ftp-config,ftp Ipp-printing or ipp-config,ippTCP/IP Raw Print Ports TCP/IP Access ControlTCP/IP Other Settings Slp-keep-alive Slp-configBonjour-config Syslog-facilityIcmp-ts-config Idle-timeoutUser-timeout or telnet-timeout Cold-resetSnmp-config Telnet-config or telnetDefault-ip Default-ip-dhcpSet-cmnty-name or set-community-name Auth-trap or authentication-trapIpx-config or ipx/spx Get-cmnty-name or get-community-nameAppleTalk Other SettingsUsb-speed UpgradeUpgrade Tftp server IP Version Product Number Filename Usb-modeSupport Use Dhcp IPv4Unix systems Windows Server 2003 and Server Windows systemsDiscontinue Dhcp configuration Laserjet1 Use Rarp IPv4Arp -s IP address LAN hardware address Ping IP address Use the arp and ping commands IPv4Create a Telnet connection Use Telnet IPv4Route add Jetdirect IP Address system IP Address Typical Telnet sessionTelnet user interface options Telnet command line interface default3Telnet Commands and Parameters CommandDescription User Control CommandsWireless 802.11 Main Svr-auth-pass Auth-typeServer-auth Svr-auth-userWireless Diagnostics Specified Ipsec-config Firewall-config00a0f8387af7 Host-nameDomain-name support.hp.com Tftp ServerTftp Filename Hpnp/printer1.cfgLpd-printing PrintingFtp-printing Ipp-printingTCP/IP Other TCP/IP LPD QueuesSyslog-svr To 1440 EnableFtp-download Bonjour Domain NameFor more information, see HP Embedded Web Server V.40.xx on User-timeoutEws-config Gw-disableTCP/IP Diagnostics Snmp Traps Ipx-mode Ipx-configIpx-unitname AddressOther 1000t-ms-conf Upgrade LaaXml-services-conf Ws-discovery-confNetwork-select Menu Interface Job-timeoutWeb JetAdmin URL Web JetAdmin NameUse Telnet to remove an IP address 1Example Using the Menu InterfaceMove to another network IPv4 Use the HP Embedded Web ServerUse the printer control panel Page HP Embedded Web Server Compatible Web browsers Supported HP Web Jetadmin versionRequirements View the HP Embedded Web ServerPage 1HP Jetdirect Home Page Items HP Jetdirect Home tabOperating notes Device tabs Networking tab2Networking Menu Items WirelessConfiguration section Diagnostics section3Wireless configuration parameters WEP Personal WEP Enterprise WPA Enterprise Restore DefaultsWPA Personal 4TCP/IP Summary tab TCP/IP SettingsSummary tab 5TCP/IP Network Identification tab Network Identification tab6TCP/IPv4 tab TCP/IPv4 tab7TCP/IPv6 tab TCP/IPv6 tab8TCP/IP Config Precedence tab Config Precedence tab9TCP/IP Advanced tab Advanced tabDefault IP Manual SettingsProxy Server Password DisableNetwork Settings 10IPX/SPX tab settings AppleTalk 11AppleTalk tab settings12SNMP tab settings 13Miscellaneous Settings Other SettingsMisc. Settings Link settings HP XML ServicesCertificate Mgmt Service Web Services PrintLPD Queues Firmware UpgradeAppend String Name 14LPD Queues tab settingsQueue Name Prepend String NameValue Default Queue NameQueue Type String NameRefresh Rate USB Settings15USB Settings tab Support InfoWizard Security SettingsSelect Language StatusSecurity Level Description Basic Security 16Wizard Security LevelsCustom Security Restore DefaultsSecurity Level Description Enhanced Security RecommendedCertificates AuthorizationAdmin. Account Printer Password Synchronization17Certificate configuration screens Configure certificatesImport Certificate and Private Key Install CertificateCertificate Validity Period Certificate InformationDomain Name myprinter.mydepartment.mycompany.com Install Certificate or Install CA Certificate screensExamples IP Address Mask Description Access ControlSnmp Mgmt. ProtocolsWeb Mgmt 18Other protocols Enable Print ProtocolsEnable Print Services OtherNaming Resolution 802.1X AuthenticationEnable Device Discovery SLP, might be disabled without notification19802.1X configuration settings Assessment Other Links IPsec/Firewall configuration 1Firewall Policy 1IPsec/Firewall Policy HP Jetdirect IPsec/Firewall wizard Default Rule exampleAll IPv4 Addresses All Jetdirect Print Services IPsec security associations SALimit Limitations to rules, templates and services2Limitations to rules, templates and services Create Address Template Specify Address Template3Create Address Template Specify Service TemplateCreate Service Template 4Create Service Template6Manage Custom Services Manage ServicesManage Custom Services 5Manage ServicesSpecify IPsec/Firewall Template Specify Action7Create IPsec Template Identity AuthenticationCreate IPsec Template Certificates on 8Identity AuthenticationKerberos Certificates9Kerberos Kerberos Settings10Kerberos Settings 11IKEv1/IKEv2 Phase 1 Authentication IKEv1/IKEv2 Phase 1 AuthenticationIKEv1/IKEv2 Phase 2 / Quick Mode IPsec Protocols 13Advanced IKE Settings Advanced IKE Settings12IKEv1/IKEv2 Phase 2 / Quick Mode Settings IPsec Protocols 15Manual Keys IPsec Protocols Manual KeysManual Keys 14IPsec Protocols Manual KeysRule Summary Configure Windows systems1Summary of HP Jetdirect security features Security featuresIPv4/IPv6 Snmp v1/v2c Set Community Name IP/IPX Authentication and EncryptionHP Web Jetadmin IPv4 Password and Profiles Telnet Control2Settings for Access Control Limit access to security featuresHigh Settings Level of Access ControlMedium Troubleshoot the HP Jetdirect print server Reset to factory defaultsExample Cold reset using the service menu Disable an HP Jetdirect embedded print serverTroubleshooting chart assess the problem General troubleshootingProcedure 2 Print an HP Jetdirect configuration Procedure 1 Verify the printer is on and onlineProcedure 3 Resolve printer display error messages Procedure 4 Resolve printer network communication problems Telnet IP address port Unable to communicate after initial setup Troubleshooting wireless print serversUnable to communicate during initial setup My configured channel does not match the configuration Corrective actions SymptomsImproving reception and performance Firmware download failureStatus field error messages HP Jetdirect configuration pagesHP Jetdirect configuration Section Name Configuration page format1Configuration Page Sections HP Jetdirect Configuration or General InformationMessageDescription Configuration page messagesHP Jetdirect Configuration/General Information 2HP Jetdirect Configuration/General InformationMessage Description USB printer informationUSB Speed Wireless settings4802.11 Wireless settings Network Name Ssid Status/Error MessagesSSL Issuer Signal StrengthAccess Point / Bssid Authentication TypeSecurity Settings Snmp Set Cmty Name Access ListSecure Web Configuration Snmp VersionsTCP/IP protocol information TCP/IP configuration informationNetwork Statistics IPv4 Section IPv4 sectionRarp Server BOOTP/DHCP Server Default GatewayConfig by Bootp ServerIPv6 Section IPX/SPX protocol informationIPv6 section Novell/NetWare parameters 10 IPX/SPX configuration informationCN=ljpserver.OU=support.OU=mycity.OU=mycompany 11 Novell/NetWare configuration information12 AppleTalk configuration information AppleTalk protocol informationDLC/LLC protocol information Error messages13 DLC/LLC configuration information 14Error messagesError Code and Message Description Not Configured Network Reconfig MustReboot Disconnected Configuration ErrorTimeout Unable to LoginUnable to SET Password Disconnecting SPXDirected to the print server 3C NDS ERR Unresolved Queue Novram Error4D CF ERR Access List 4F Tftp Remote ErrorBOOTP/RARP in Progress Tftp Local ErrorBAD BOOTP/DHCP Reply BAD Bootp TAG SizeHP Jetdirect Security 15General Information 2HP Jetdirect SecurityCurrent IPsec status IPsec Statistics IPsec Error LogLocal IP addresses 18IKE Statistics IKE StatsIPsec Rules 17IPsec statisticsSRC Available Network ServicesIPsec Security Associations SA table 19IPsec Security AssociationsProgram Name Purpose of Program LPD printingAbout LPD Table A-1LPD programs and protocolsSet up print queues Requirements for configuring LPDLPD setup overview Set up IP parametersTable A-2Supported queue types Configure print queues for BSD-based systemsPrint a test file LPD on Unix systemsUse SAM to configure print queues HP-UX systems Examples myprinter or printer1 Print a test fileLPD on Windows Server 2003/2008 systems Install TCP/IP softwareAdd LPR compatible printer window Add Windows optional networking components Verify the configurationLPD on Windows XP systems Print from Windows clientsAdd a new LPD printer Configure a network LPD printerCreate an LPR port for an installed printer Page FTP connections FTP printingPrint files Use FTP printingData connection FTP loginEnd the FTP session CommandsTable B-1User commands for HP Jetdirect FTP server Command DescriptionPORT1 Example FTP SessionHP Jetdirect EIO Menu on Graphical Control Panel HP Jetdirect control panel menusGraphical control panel menus Table C-1HP Jetdirect EIO Menu on Graphical Control Panel Address IPv6 Settings EnablePrimary DNS Secondary DNSFrame Type AppleTalk EnableProxy Server Proxy PortIPsec or Firewall Reset SecurityEnable Wipe Login Security Keep Reset Assessment DisableSnmp Test Diagnostics Embedded TestsLAN HW Test Http TestDest Type TimeoutExecute Ping TestLink Speed RTT AveragePing in Progress RefreshMenu Item Description Classic control panel EIO menusHP Jetdirect EIO Menu on Classic Control Panel WEB Table C-2HP Jetdirect EIO Menu on Classic Control PanelMenu Item CFG IPX/SPXPrint IpsecFirewall Code VerificationOpenSSL license Open source licensing statementsGSOAP OpenSSLOriginal SSLeay license Page Type IndexSee also Gateway Babble Port Select WEP Hewlett-Packard Development Company, L.P
Related manuals
Manual 58 pages 63.63 Kb

ew2500 802.11b/g Print Server specifications

The HP ew2500 802.11b/g Print Server is a versatile printing solution designed to streamline the printing process within a wireless network environment. Specifically geared towards small to medium-sized offices, this print server provides seamless integration for various printers and enhances accessibility across multiple devices.

One of the main features of the HP ew2500 is its adherence to the 802.11b/g wireless standards, offering high-speed wireless connectivity with a maximum data rate of up to 54 Mbps. This ensures efficient data transmission, allowing users to print from anywhere within the wireless range without the hassle of tangled cables or limited port access. The print server supports both infrastructure and ad-hoc wireless networking modes, making it flexible for diverse networking environments.

Another notable characteristic of the ew2500 is its compatibility with various printer types, including inkjet, laser, and all-in-one printers. This compatibility is essential for organizations that utilize different printer brands and models, facilitating a centralized printing solution. Additionally, the server is equipped with an Ethernet port, providing the option for wired connectivity, which can be beneficial for situations where wireless performance might be compromised.

The HP ew2500 is designed with user-friendly features. The easy setup process allows users to configure the server using a straightforward web interface, which can be accessed from any network-enabled device. This simplicity reduces the time required for installation and eliminates the need for extensive technical knowledge.

Security is another critical aspect of the HP ew2500's functionality. The print server supports robust encryption protocols, including WEP and WPA, ensuring that data transmitted over the network remains secure from unauthorized access. This feature is particularly important in office environments where sensitive information may be printed frequently.

Overall, the HP ew2500 802.11b/g Print Server is an efficient and reliable solution for enabling wireless printing capabilities in a business setting. Its combination of high-speed wireless connectivity, broad printer compatibility, user-friendly setup, and essential security features makes it an excellent choice for organizations looking to enhance their printing infrastructure. Whether in an office or a home environment, the ew2500 provides the functionality and convenience necessary to meet modern printing demands efficiently.